<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 9/16/15 4:00 AM, Sebastian Damm
wrote:<br>
</div>
<blockquote
cite="mid:CABkWSFzbU7V2dnJvHir0CEy1ndB4Giar=cxOd+ieV9Rs-Wb3FA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>Hi,<br>
<br>
</div>
we have a load balancer which is handling a lot of SIP
traffic all day. There's always 20-40 Mbit SIP traffic
going through. From time to time we see in our logs
messages like these:<br>
<br>
Sep 16 09:46:28 ecker /usr/sbin/kamailio[25505]:
ERROR: <core> [udp_server.c:591]: udp_send():
ERROR: udp_send: sendto(sock,0x7f2d9d6b3ce0,1321,0,<a
moz-do-not-send="true"
href="http://46.237.225.126:5060">46.237.225.126:5060</a>,16):
Operation not permitted(1)<br>
Sep 16 09:46:38 ecker /usr/sbin/kamailio[25194]:
ERROR: <core> [udp_server.c:591]: udp_send():
ERROR: udp_send: sendto(sock,0x7efc982b8fc8,420,0,<a
moz-do-not-send="true"
href="http://82.113.121.183:35794">82.113.121.183:35794</a>,16):
Operation not permitted(1)<br>
Sep 16 09:46:40 ecker /usr/sbin/kamailio[25505]:
ERROR: <core> [udp_server.c:591]: udp_send():
ERROR: udp_send: sendto(sock,0x7f2d9d6b3ce0,1338,0,<a
moz-do-not-send="true"
href="http://5.158.137.9:55067">5.158.137.9:55067</a>,16):
Operation not permitted(1)<br>
Sep 16 09:46:44 ecker /usr/sbin/kamailio[25183]:
ERROR: <core> [udp_server.c:591]: udp_send():
ERROR: udp_send: sendto(sock,0x7efc982d9f48,450,0,<a
moz-do-not-send="true"
href="http://178.165.131.197:37515">178.165.131.197:37515</a>,16):
Operation not permitted(1)<br>
Sep 16 09:46:49 ecker /usr/sbin/kamailio[25643]:
ERROR: <core> [udp_server.c:591]: udp_send():
ERROR: udp_send: sendto(sock,0x7f93fb624530,496,0,<a
moz-do-not-send="true"
href="http://172.56.7.69:25643">172.56.7.69:25643</a>,16):
Operation not permitted(1)<br>
Sep 16 09:46:55 ecker /usr/sbin/kamailio[25335]:
ERROR: <core> [udp_server.c:591]: udp_send():
ERROR: udp_send: sendto(sock,0x7f41632cda98,598,0,<a
moz-do-not-send="true"
href="http://80.215.234.139:3396">80.215.234.139:3396</a>,16):
Operation not permitted(1)<br>
Sep 16 09:46:56 ecker /usr/sbin/kamailio[25345]:
ERROR: <core> [udp_server.c:591]: udp_send():
ERROR: udp_send: sendto(sock,0x7f41632f4840,459,0,<a
moz-do-not-send="true"
href="http://94.197.120.191:8225">94.197.120.191:8225</a>,16):
Operation not permitted(1)<br>
<br>
</div>
I know that these messages can be produced by iptables
blocking the outbound traffic. But our outbound chain
looks basically like this:<br>
<br>
root@ecker:~# iptables-save | grep OUTPUT<br>
:OUTPUT DROP [0:0]<br>
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT<br>
-j ACCEPT<br>
-A OUTPUT -m state --state INVALID -j DROP<br>
-A OUTPUT -o lo -m state --state NEW -j ACCEPT<br>
-A OUTPUT -o lo -j ACCEPT<br>
-A OUTPUT -m state --state NEW -j ACCEPT<br>
<br>
</div>
We don't have the nf_ct_sip module loaded, syslog doesn't
say anything, and even clearing all iptables rules doesn't
eliminate those errors.<br>
<br>
</div>
Has anyone ever seen this? It looks like a load thing,
because at weekends there are significantly less errors.<br>
</div>
</div>
</div>
</blockquote>
Try to see if the transmit queue is high (third column) using
netstat. You always want that to drop down to zero fast when it
goes up. If it starts to grow, you definitely have a problem
between the application and operating system.<br>
<br>
# netstat -aupn | grep kama<br>
udp 0 0 23.239.16.141:50963
23.239.16.141:22555 ESTABLISHED 26101/kamailio <br>
udp 0 0 23.239.16.141:50195
198.58.110.117:22555 ESTABLISHED 26081/kamailio <br>
udp 0 0 23.239.16.141:42772
198.58.110.117:22555 ESTABLISHED 26122/kamailio <br>
udp 0 0 23.239.16.141:49046
23.239.16.141:22555 ESTABLISHED 26112/kamailio <br>
udp 0 0 23.239.16.141:49181
198.58.110.117:22555 ESTABLISHED 26118/kamailio <br>
udp 0 0 23.239.16.141:36898
23.239.16.141:22555 ESTABLISHED 26122/kamailio <br>
udp 0 0 23.239.16.141:59813
23.239.16.141:22555 ESTABLISHED 26120/kamailio <br>
udp 0 0 23.239.16.141:36016
23.239.16.141:22555 ESTABLISHED 26110/kamailio <br>
udp 0 0 23.239.16.141:47541
198.58.110.117:22555 ESTABLISHED 26103/kamailio <br>
udp 0 0 23.239.16.141:60727
23.239.16.141:22555 ESTABLISHED 26096/kamailio <br>
udp 0 0 23.239.16.141:52282
198.58.110.117:22555 ESTABLISHED 26120/kamailio <br>
udp 0 0 23.239.16.141:57275
198.58.110.117:22555 ESTABLISHED 26114/kamailio <br>
udp 0 0 23.239.16.141:51137
23.239.16.141:22555 ESTABLISHED 26114/kamailio <br>
udp 0 0 23.239.16.141:53574
23.239.16.141:22555 ESTABLISHED 26095/kamailio <br>
udp 0 0 23.239.16.141:5065
0.0.0.0:* 26081/kamailio <br>
<br>
<br>
<blockquote
cite="mid:CABkWSFzbU7V2dnJvHir0CEy1ndB4Giar=cxOd+ieV9Rs-Wb3FA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div><br>
</div>
Thanks,<br>
</div>
Sebastian<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a>
<a class="moz-txt-link-freetext" href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Technical Support
<a class="moz-txt-link-freetext" href="http://www.cellroute.net">http://www.cellroute.net</a></pre>
</body>
</html>